CVE-2012-4353: Stack-based buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lit...

Security readout for executives and security teams

This is a remote code execution flaw in older Sielco Sistemi Winlog SCADA software. If an affected RunTime.exe service is reachable, an attacker could crash or take control of the process. The sources identify versions before 2.07.17 as affected, but do not provide CVSS scoring or evidence of active exploitation. Exposure is most likely in legacy industrial environments still running Winlog Pro or Winlog Lite SCADA before 2.07.17, especially where the runtime service is reachable across plant, corporate, remote-access, or vendor-support networks. Prioritize remediation for any internet, corporate-network, or remote-access reachable SCADA runtime. If affected systems are isolated and upgraded, urgency decreases, but legacy OT exposure should still be formally verified. Mitigation focus: Inventory Winlog Pro and Winlog Lite SCADA deployments and versions.; Upgrade affected installations to 2.07.17 or later where vendor guidance supports it.; Restrict access to the runtime service from untrusted networks..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.